Skip to content

Actions: OpenIdentityPlatform/OpenAM

Actions

CodeQL

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
codeql.yml
141 workflow runs
141 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
CVE-2026-84375 GHSA-2883-xcg3-v3hh js-yaml: maxTotalMergeKeys does no… CodeQL #141: Commit 4b52a13 pushed by vharseko
1h 21m 40s master
master
1h 21m 40s
CVE-2026-84375 GHSA-2883-xcg3-v3hh js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources in openam-ui-api (4.3.1 -> 4.3.2) CodeQL #140: Pull request #1132 opened by vharseko
1h 54m 30s vharseko:fix/cve-2026-84375-js-yaml-api
vharseko:fix/cve-2026-84375-js-yaml-api
1h 54m 30s
Validate ID-FF forward targets, FilesRepo identity names and SAML1 POST target CodeQL #139: Pull request #1128 synchronize by vharseko
1h 17m 31s vharseko:fix/idff-forward-filesrepo-saml-oauth
vharseko:fix/idff-forward-filesrepo-saml-oauth
1h 17m 31s
[#1130] Verify client assertions by their own alg; default id_token_signed_response_alg CodeQL #138: Pull request #1131 synchronize by vharseko
15m 9s vharseko:fix/1130-client-assertion-alg-dispatch
vharseko:fix/1130-client-assertion-alg-dispatch
15m 9s
Do not log session ids, access tokens and password attributes (#1127) CodeQL #137: Commit b6c1d8b pushed by vharseko
17m 45s master
master
17m 45s
GHSA-x8cj-3hqv-cgwh Session query REST endpoint lets a realm administ… CodeQL #136: Commit e0ba59d pushed by vharseko
1m 10s master
master
1m 10s
Do not log session ids, access tokens and password attributes CodeQL #135: Pull request #1127 synchronize by vharseko
36m 25s vharseko:fix/sensitive-token-logging
vharseko:fix/sensitive-token-logging
36m 25s
[#1130] Verify client assertions by their own alg; default id_token_signed_response_alg CodeQL #134: Pull request #1131 synchronize by vharseko
29m 47s vharseko:fix/1130-client-assertion-alg-dispatch
vharseko:fix/1130-client-assertion-alg-dispatch
29m 47s
Validate ID-FF forward targets, FilesRepo identity names and SAML1 POST target CodeQL #133: Pull request #1128 synchronize by vharseko
14m 57s vharseko:fix/idff-forward-filesrepo-saml-oauth
vharseko:fix/idff-forward-filesrepo-saml-oauth
14m 57s
Do not log session ids, access tokens and password attributes CodeQL #132: Pull request #1127 synchronize by vharseko
18m 25s vharseko:fix/sensitive-token-logging
vharseko:fix/sensitive-token-logging
18m 25s
[#1130] Verify client assertions by their own alg; default id_token_signed_response_alg CodeQL #131: Pull request #1131 synchronize by vharseko
28m 25s vharseko:fix/1130-client-assertion-alg-dispatch
vharseko:fix/1130-client-assertion-alg-dispatch
28m 25s
Validate ID-FF forward targets, FilesRepo identity names and SAML1 POST target CodeQL #130: Pull request #1128 synchronize by vharseko
15m 53s vharseko:fix/idff-forward-filesrepo-saml-oauth
vharseko:fix/idff-forward-filesrepo-saml-oauth
15m 53s
Escape reflected request parameters in the sample servlets (#1129) CodeQL #129: Commit 8891ce4 pushed by vharseko
2h 2m 11s master
master
2h 2m 11s
SetupUtils: pass chmod arguments to Runtime.exec as an array (#1126) CodeQL #128: Commit 6006c77 pushed by vharseko
23s master
master
23s
[#1114] Fix precompile-jsps profile for the Jakarta EE 9 webapp (#1120) CodeQL #127: Commit f189e36 pushed by vharseko
18s master
master
18s
Escape reflected request parameters in the sample servlets CodeQL #126: Pull request #1129 synchronize by vharseko
2h 38m 30s vharseko:fix/sample-apps-xss
vharseko:fix/sample-apps-xss
2h 38m 30s
CVE-2026-84375 GHSA-2883-xcg3-v3hh js-yaml: maxTotalMergeKeys does no… CodeQL #125: Commit bfa7e10 pushed by vharseko
2h 37m 3s master
master
2h 37m 3s
[#1130] Verify client assertions by their own alg; default id_token_signed_response_alg CodeQL #124: Pull request #1131 opened by vharseko
14m 39s vharseko:fix/1130-client-assertion-alg-dispatch
vharseko:fix/1130-client-assertion-alg-dispatch
14m 39s
Validate ID-FF forward targets, FilesRepo identity names and SAML1 POST target CodeQL #123: Pull request #1128 synchronize by vharseko
2h 7m 17s vharseko:fix/idff-forward-filesrepo-saml-oauth
vharseko:fix/idff-forward-filesrepo-saml-oauth
2h 7m 17s
Escape reflected request parameters in the sample servlets CodeQL #122: Pull request #1129 opened by vharseko
1h 34m 49s vharseko:fix/sample-apps-xss
vharseko:fix/sample-apps-xss
1h 34m 49s
Validate ID-FF forward targets, FilesRepo identity names and SAML1 POST target CodeQL #121: Pull request #1128 opened by vharseko
28m 43s vharseko:fix/idff-forward-filesrepo-saml-oauth
vharseko:fix/idff-forward-filesrepo-saml-oauth
28m 43s
Do not log session ids, access tokens and password attributes CodeQL #120: Pull request #1127 opened by vharseko
1h 3m 32s vharseko:fix/sensitive-token-logging
vharseko:fix/sensitive-token-logging
1h 3m 32s
CodeQL CodeQL #119: Scheduled
1h 45m 58s master
master
1h 45m 58s
SetupUtils: pass chmod arguments to Runtime.exec as an array CodeQL #118: Pull request #1126 opened by vharseko
55m 5s vharseko:fix/setuputils-chmod-exec-args
vharseko:fix/setuputils-chmod-exec-args
55m 5s
CVE-2026-84373 vitest: Path traversal / arbitrary file read via @vite… CodeQL #117: Commit 5993d76 pushed by vharseko
1h 20m 50s master
master
1h 20m 50s